This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a3a2f33322d3438203d3e203232303437.roa
File:                     323830303a3135303a3a2f33322d3438203d3e203232303437.roa (raw, json)
Hash identifier:          rfj55dYAIqFKZ0Souk/7cYuqPYkbAgArYABKPdNB8jY=
Subject key identifier:   C6:98:0C:D7:9F:7A:0D:23:43:53:A7:16:2E:17:E1:58:57:D0:9E:C8
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       7505A512619EE3F6ED13DD82A6E473924ADF160F
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a3a2f33322d3438203d3e203232303437.roa
Signing time:             Tue 06 Jan 2026 19:15:15 +0000
ROA not before:           Tue 06 Jan 2026 19:10:15 +0000
ROA not after:            Tue 05 Jan 2027 19:15:15 +0000
asID:                     22047
IP address blocks:        2800:150::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:05:a5:12:61:9e:e3:f6:ed:13:dd:82:a6:e4:73:92:4a:df:16:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:15 2026 GMT
            Not After : Jan  5 19:15:15 2027 GMT
        Subject: CN=C6980CD79F7A0D234353A7162E17E15857D09EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:fc:75:d0:a7:d3:54:5d:54:5b:0c:42:f8:
                    d0:98:d8:2a:52:07:ba:fb:81:3a:bd:d4:14:d9:fa:
                    67:3c:3e:da:82:8a:f7:8c:cd:e3:7a:ee:53:62:b1:
                    20:0b:78:ad:4a:72:91:a1:50:6d:6b:a3:78:72:22:
                    eb:0f:8b:21:c5:a2:1f:54:e2:d0:68:75:5b:a4:51:
                    f4:f2:35:a0:8c:54:9e:d5:e6:75:f8:90:3a:69:e5:
                    72:3d:9f:7c:c5:7b:3d:e9:1b:c6:54:11:12:2d:63:
                    fd:55:75:52:21:de:d8:93:a3:b0:6a:59:bf:5b:76:
                    d5:32:c9:fa:02:1a:45:d3:94:b1:c0:21:70:85:3b:
                    4f:87:06:b1:c2:2e:9c:ab:c6:f9:c6:b2:38:21:1b:
                    67:85:b1:60:12:91:28:93:29:05:d9:4a:e3:f1:c2:
                    33:74:81:ff:c9:40:8b:2f:7a:c0:cc:85:8c:65:fe:
                    b2:73:a8:d7:d2:d1:7d:d0:e0:dd:5f:dd:f3:65:8a:
                    f1:12:78:0a:3a:12:1a:1c:42:5c:df:9a:1b:65:ca:
                    da:c8:e6:8d:76:51:36:9f:94:d7:8a:c4:8f:16:8b:
                    4e:e3:c4:db:16:02:15:47:81:3e:11:44:b6:ac:f2:
                    6f:ec:7d:22:45:c8:e3:52:5a:45:bc:68:4a:68:1a:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:98:0C:D7:9F:7A:0D:23:43:53:A7:16:2E:17:E1:58:57:D0:9E:C8
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/323830303a3135303a3a2f33322d3438203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:150::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:71:93:9e:e5:de:f4:04:c2:b7:18:d7:89:2a:6b:be:d8:8c:
         a0:3d:ce:be:2b:da:bd:c0:ef:30:91:99:ca:ea:69:08:7a:e4:
         5f:8f:d7:91:a8:03:f4:aa:cf:5b:8a:58:08:f1:94:0e:26:7f:
         15:c0:7c:1d:97:81:91:ac:3d:e0:b3:a4:e9:bb:92:1f:b7:82:
         76:cc:ea:a3:7f:94:0f:ac:2c:50:16:93:18:8e:27:b6:05:7c:
         9f:f4:06:a0:84:53:d0:4a:7d:88:3a:2e:2b:bd:3d:61:56:16:
         b9:d3:1d:b7:c1:da:a1:4c:9e:54:dc:d3:3b:e7:52:b5:0e:e6:
         cd:0e:c1:1a:62:db:3c:f5:69:92:67:81:91:d8:ab:0f:22:ba:
         fd:11:76:c6:2e:92:c4:f2:0e:f1:b1:94:2c:29:ff:98:da:84:
         a2:17:5c:92:2d:79:03:4e:83:cf:7c:90:97:e8:6f:58:88:3b:
         9b:0f:d1:f6:d3:29:4a:85:e1:b3:61:2e:7e:b7:f8:5c:ba:3e:
         26:be:9d:94:14:ab:dc:7d:1c:1f:bd:c5:fc:e9:c5:f9:ad:35:
         60:15:a8:ab:e5:50:30:d5:05:e0:c6:bf:5e:f0:cc:84:f6:65:
         29:2e:4c:f5:ee:be:e9:15:f4:4b:7f:3b:57:4a:1a:a3:61:28:
         08:69:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:33 2026 by rpki-client